Chronicle Rule Type
Whether the rule generating this detection is a single event or multi-event rule.
Google SecOps singleSelect
Details
| ID | incident_chronicleruletype |
|---|---|
| CLI Name | chronicleruletype |
| Type | singleSelect |
| Version | -1 |
| Required | No |
| Read Only | No |
| Use as KPI | No |
| Searchable | Yes |
Select Values
SINGLE_EVENTMULTI_EVENT